Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/4LRbTZWI0P9zgp7wxjUYjiyB1Ns.roa
File: 4LRbTZWI0P9zgp7wxjUYjiyB1Ns.roa (raw, json)
Hash identifier: sEZnYP3/OYwRSEfPjcOuGA0VxIWZ/7zgDvzWnlQfeSg=
Subject key identifier: E0:B4:5B:4D:95:88:D0:FF:73:82:9E:F0:C6:35:18:8E:2C:81:D4:DB
Certificate issuer: /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial: 018D9E6344A1105D2777EAD23EB71021387A
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/4LRbTZWI0P9zgp7wxjUYjiyB1Ns.roa
Signing time: Mon 12 Feb 2024 17:35:22 +0000
ROA not before: Mon 12 Feb 2024 17:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44575
IP address blocks: 92.63.80.0/24 maxlen: 24
92.63.81.0/24 maxlen: 24
92.63.82.0/24 maxlen: 24
92.63.83.0/24 maxlen: 24
92.63.84.0/24 maxlen: 24
92.63.86.0/24 maxlen: 24
92.63.88.0/24 maxlen: 24
92.63.92.0/24 maxlen: 24
92.63.93.0/24 maxlen: 24
193.110.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 10:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9e:63:44:a1:10:5d:27:77:ea:d2:3e:b7:10:21:38:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Validity
Not Before: Feb 12 17:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0b45b4d9588d0ff73829ef0c635188e2c81d4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c5:bb:fc:ab:85:bb:07:9c:c3:2b:2d:f6:15:
de:ff:e5:68:e1:02:b6:2b:e4:b2:90:4c:91:50:b1:
7c:4d:8f:42:5c:6b:b5:55:9d:6a:51:a5:81:03:77:
c7:92:df:bd:78:40:d1:2c:bd:a5:15:9d:51:39:96:
33:8e:6c:d5:74:85:92:ad:79:6d:bc:da:a4:45:da:
6e:5e:f5:78:7d:4d:61:33:e3:39:f6:b0:98:72:14:
c0:64:ca:9b:f3:80:63:9d:01:05:d7:f7:a5:98:28:
18:4d:6e:4b:c9:96:6d:c6:26:ad:ce:56:4f:59:d4:
37:f0:56:1d:f3:cc:e5:bb:98:e9:8b:3c:a7:58:da:
77:ef:d1:da:ba:49:48:26:5f:df:28:13:5d:ed:4d:
49:b5:35:0e:ac:55:22:ff:1a:dd:51:35:30:75:f6:
9b:e6:c3:11:3f:fd:de:f4:c8:d0:c0:bd:60:46:09:
d9:f9:b4:f2:a1:73:ea:f8:e4:89:1d:9f:07:ae:ca:
ea:2b:2b:c5:51:53:cb:aa:df:00:1d:4c:8a:7e:13:
8d:4d:e0:21:35:d0:50:0b:57:37:f3:c6:b2:63:cd:
5a:cc:a0:14:36:bb:db:7a:47:a4:54:8e:9e:61:f3:
e5:01:4d:21:2b:bd:12:e2:b1:b8:6b:24:f9:c2:82:
ae:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B4:5B:4D:95:88:D0:FF:73:82:9E:F0:C6:35:18:8E:2C:81:D4:DB
X509v3 Authority Key Identifier:
keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/4LRbTZWI0P9zgp7wxjUYjiyB1Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.80.0-92.63.84.255
92.63.86.0/24
92.63.88.0/24
92.63.92.0/23
193.110.164.0/23
Signature Algorithm: sha256WithRSAEncryption
72:b8:cf:f8:ce:8b:62:6f:d7:ad:6b:1e:bf:c8:3c:09:d8:44:
99:8d:21:5d:ce:2f:c3:2a:cf:d4:8a:fe:f0:fd:c4:71:fe:a2:
43:0a:84:5e:c2:ef:5f:a8:05:7f:f8:ac:a7:69:76:76:ae:a9:
4b:32:ea:1f:ca:b9:41:de:d4:61:ce:80:4e:09:15:68:b7:2d:
2a:76:87:8b:d5:00:2c:eb:0d:98:73:34:7c:50:6f:22:f0:b1:
29:52:fb:3a:d7:59:44:c6:5d:83:f6:d4:cf:fb:18:0b:96:cd:
54:d6:f5:ee:03:f9:b5:1e:28:70:2c:3c:53:c8:2f:d0:a6:7a:
65:2f:88:50:92:41:a1:ce:4d:de:fd:4c:08:5b:7b:9a:8f:86:
fd:ab:36:d9:85:fb:85:9c:aa:26:7f:a1:f5:87:de:71:64:9c:
2d:26:cc:4f:41:17:2b:32:5b:46:73:c0:3d:ce:46:68:e9:17:
86:2d:c1:9b:3d:bb:68:99:77:e4:91:a2:3e:0b:ec:5d:30:54:
37:95:32:c4:ea:06:60:1f:8d:2b:f2:d4:aa:a2:35:2e:8b:7a:
e2:b9:61:ca:a2:e3:26:b9:8c:33:13:33:89:63:ae:0f:bb:d0:
59:df:1c:58:1f:84:91:05:89:fa:0c:52:14:6a:7b:f9:be:87:
95:c9:5a:7a
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAY2eY0ShEF0nd+rSPrcQITh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTA0ZTRmN2Q5ZjM4ZDhlMjJhMmQzMmJlMDE5MDMxOTMw
YzFhNDcwHhcNMjQwMjEyMTczNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGI0NWI0ZDk1ODhkMGZmNzM4MjllZjBjNjM1MTg4ZTJjODFkNGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicW7/KuFuwecwyst9hXe/+Vo4QK2
K+SykEyRULF8TY9CXGu1VZ1qUaWBA3fHkt+9eEDRLL2lFZ1ROZYzjmzVdIWSrXlt
vNqkRdpuXvV4fU1hM+M59rCYchTAZMqb84BjnQEF1/elmCgYTW5LyZZtxiatzlZP
WdQ38FYd88zlu5jpizynWNp379HauklIJl/fKBNd7U1JtTUOrFUi/xrdUTUwdfab
5sMRP/3e9MjQwL1gRgnZ+bTyoXPq+OSJHZ8HrsrqKyvFUVPLqt8AHUyKfhONTeAh
NdBQC1c388ayY81azKAUNrvbekekVI6eYfPlAU0hK70S4rG4ayT5woKuCQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFOC0W02ViND/c4Ke8MY1GI4sgdTbMB8GA1UdIwQY
MBaAFGYQTk99nzjY4iotMr4BkDGTDBpHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84MmQyMjItMjIwMi00NWYyLWI5MDQt
NDc0NzJlZDNiZWNiLzEvNExSYlRaV0kwUDl6Z3A3d3hqVVlqaXlCMU5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84MmQyMjItMjIwMi00NWYyLWI5MDQtNDc0NzJlZDNiZWNi
LzEvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBARcP1AD
BABcP1QDBABcP1YDBABcP1gDBAFcP1wDBAHBbqQwDQYJKoZIhvcNAQELBQADggEB
AHK4z/jOi2Jv161rHr/IPAnYRJmNIV3OL8Mqz9SK/vD9xHH+okMKhF7C71+oBX/4
rKdpdnauqUsy6h/KuUHe1GHOgE4JFWi3LSp2h4vVACzrDZhzNHxQbyLwsSlS+zrX
WUTGXYP21M/7GAuWzVTW9e4D+bUeKHAsPFPIL9CmemUviFCSQaHOTd79TAhbe5qP
hv2rNtmF+4WcqiZ/ofWH3nFknC0mzE9BFysyW0ZzwD3ORmjpF4YtwZs9u2iZd+SR
oj4L7F0wVDeVMsTqBmAfjSvy1KqiNS6LeuK5Ycqi4ya5jDMTM4ljrg+70FnfHFgf
hJEFifoMUhRqe/m+h5XJWno=
-----END CERTIFICATE-----
Generated at Mon Jun 17 11:57:47 2024 by rpki-client on console-ams.rpki-client.org